Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.mft
File:                     f212dc622881566bdfae962b6246371233dfcd20.mft (raw, json)
Hash identifier:          KZo5j+ei+xlcklVcMYZgYf+LTxzbS5pZc37QJTMUcfM=
Subject key identifier:   24:12:59:2C:4C:10:15:53:B2:C6:D0:26:1B:3A:F8:01:1C:21:7A:28
Authority key identifier: 39:4A:E1:0A:B0:2D:99:26:70:DF:4E:9B:77:76:31:4F:0E:E0:A4:C8
Certificate issuer:       /CN=f212dc622881566bdfae962b6246371233dfcd20
Certificate serial:       1560A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f212dc622881566bdfae962b6246371233dfcd20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.mft
Manifest number:          0B03
Signing time:             Fri 29 Mar 2024 04:21:26 +0000
Manifest this update:     Fri 29 Mar 2024 03:20:09 +0000
Manifest next update:     Mon 01 Apr 2024 04:29:09 +0000
Files and hashes:         1: 41d994b5dce27b0ce47de492a9a93aad2012b03b.roa (hash: dxHcgP5YejP52cdREe9gzWdnsbQpPksqWIrobFFtvSs=)
                          2: f212dc622881566bdfae962b6246371233dfcd20.crl (hash: 5/OvmEq5gE3H8RI+exHaX4epQE9BcWA94dE67N2etUU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f212dc622881566bdfae962b6246371233dfcd20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 04:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401000 (0x1560a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f212dc622881566bdfae962b6246371233dfcd20
        Validity
            Not Before: Mar 29 03:20:09 2024 GMT
            Not After : Apr  1 04:29:09 2024 GMT
        Subject: CN=e442bd01b1fb0251f21f76787fb6878413fe538b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d7:a3:8e:e4:39:35:03:c3:33:47:27:3a:05:
                    0b:69:e9:9d:72:26:c3:a3:1e:13:a1:ae:ca:61:94:
                    76:d1:48:ea:4a:d6:8f:73:f9:66:72:55:52:5d:ea:
                    7a:25:58:09:f2:6f:9c:9c:51:fb:c1:ec:82:a7:83:
                    67:6d:7a:0b:6f:48:55:2c:2a:7d:6a:ab:dc:58:66:
                    b7:54:d7:93:1b:09:32:b0:cc:91:53:f5:41:a3:b0:
                    42:65:ab:48:89:44:21:98:98:d5:7a:86:27:80:5c:
                    8a:b3:51:57:6c:e3:68:15:00:b1:2e:b4:73:93:8d:
                    12:49:94:10:e0:f6:90:eb:bd:39:95:d2:c0:46:90:
                    d7:c9:9f:bb:7f:75:fe:ea:73:44:fa:56:85:64:16:
                    54:3b:7a:a4:d5:9a:c8:5e:b5:0f:40:42:44:7e:aa:
                    c1:78:a5:54:b4:d6:e4:ff:bb:89:16:02:b8:16:eb:
                    2f:5e:d0:e2:e6:a5:63:f5:43:93:12:07:cf:b9:93:
                    9e:28:75:aa:9f:66:ae:c0:f6:7f:26:e5:8d:02:95:
                    8f:4a:be:82:4d:f6:32:c7:b7:24:57:74:ea:27:9b:
                    5b:7f:1c:db:03:4e:51:1c:12:05:b4:d3:41:83:6a:
                    1c:52:1a:ab:8d:2e:66:69:7b:bf:c9:30:99:22:68:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:12:59:2C:4C:10:15:53:B2:C6:D0:26:1B:3A:F8:01:1C:21:7A:28
            X509v3 Authority Key Identifier:
                keyid:39:4A:E1:0A:B0:2D:99:26:70:DF:4E:9B:77:76:31:4F:0E:E0:A4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f212dc622881566bdfae962b6246371233dfcd20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:2e:7c:e8:7f:b1:18:6d:ba:0b:16:64:d0:50:82:9b:24:
         09:a8:f0:99:a1:98:8a:79:80:56:40:65:00:1d:31:35:6e:3c:
         0d:e4:80:e8:0c:55:69:bf:a7:c9:c1:62:03:6a:7c:a3:ba:1a:
         b6:39:ac:40:52:67:e8:5c:8c:b5:27:0f:7b:a9:63:18:3e:37:
         f2:28:16:7c:ea:c8:92:e7:1c:72:7b:9e:9d:bc:24:73:f9:55:
         03:fb:46:e2:b1:42:53:de:ac:ba:8d:f7:f4:47:c9:ab:a4:cd:
         60:cd:5c:9a:27:cd:0c:cc:28:d9:88:80:48:0b:bf:1b:ac:7b:
         b7:63:1b:3d:32:3b:38:e1:02:4d:4d:51:b0:3c:45:2b:4f:eb:
         f8:b1:f6:a8:17:58:37:ae:ea:a1:38:0e:10:f9:59:56:be:5e:
         83:52:47:40:fd:22:c5:ec:f1:e5:da:ee:5e:03:92:2b:e2:3a:
         14:4b:17:ea:49:ae:94:fc:56:a2:94:fe:6a:dd:e4:41:60:53:
         e9:16:15:79:f6:cf:be:dd:49:6e:ba:fd:c8:63:9a:9e:78:ef:
         3d:d7:af:7e:82:6f:68:cb:e6:f8:52:e0:68:0a:04:a7:b2:16:
         af:98:7f:70:1a:c0:ec:27:76:f5:07:e6:78:39:81:ec:a1:61:
         95:11:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:32 2024 by rpki-client on console-fra.rpki-client.org